CVE-2008-1340

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger memory exhaustion and memory corruption.

Affected Software

Name	Vendor	Start Version	End Version
Ace	Vmware	1.0 (including)	1.0 (including)
Ace	Vmware	2.0 (including)	2.0 (including)
Player	Vmware	1.0.2 (including)	1.0.2 (including)
Player	Vmware	1.0.3 (including)	1.0.3 (including)
Player	Vmware	1.0.4 (including)	1.0.4 (including)
Player	Vmware	1.0.5 (including)	1.0.5 (including)
Player	Vmware	2.0 (including)	2.0 (including)
Player	Vmware	2.0.1 (including)	2.0.1 (including)
Player	Vmware	2.0.2 (including)	2.0.2 (including)
Server	Vmware	1.0.3 (including)	1.0.3 (including)
Vmware_server	Vmware	1.0.2 (including)	1.0.2 (including)
Vmware_server	Vmware	1.0.4 (including)	1.0.4 (including)
Vmware_workstation	Vmware	5.5.5 (including)	5.5.5 (including)
Vmware_workstation	Vmware	6.0.1 (including)	6.0.1 (including)
Vmware_workstation	Vmware	6.0.2 (including)	6.0.2 (including)
Workstation	Vmware	5.5 (including)	5.5 (including)
Workstation	Vmware	5.5.3_build_34685 (including)	5.5.3_build_34685 (including)
Workstation	Vmware	5.5.3_build_42958 (including)	5.5.3_build_42958 (including)
Workstation	Vmware	5.5.4 (including)	5.5.4 (including)
Workstation	Vmware	5.5.4_build_44386 (including)	5.5.4_build_44386 (including)
Workstation	Vmware	6.0 (including)	6.0 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-1340
CWE	https://cwe.mitre.org/data/definitions/399.html

Affected Software

References